---
title: Infoblox BloxOne Integration
description: "Infoblox BloxOne Threat Defense is a comprehensive DNS Detection and Response (DNSDR) solution that detects and prevents a broad range of look-alike domain use, fast flux, and many others.\n\nSIRP’s integration with Infoblox BloxOne improves security operations by fusing the capabilities of the two platforms, allowing analysts to respond to threats quickly and proactively."
---

[Skip to content](https://content.sirp.io/knowledge-base/infoblox-bloxone-integration-help-center-sirp#main-content)

English

Show submenu for translations

[Customer portal](https://content.sirp.io/customer-portal?hsLang=en)

[![SIRP-Logo-4c-KO](https://content.sirp.io/hs-fs/hubfs/SIRP-Logo-4c-KO.png?width=200&height=90&name=SIRP-Logo-4c-KO.png)](https://sirp.io/)

Open main navigation

Close main navigation

- English
  
  Show submenu for translations
- [Customer portal](https://content.sirp.io/customer-portal)
- [Contact us](https://content.sirp.io/customer-portal/new)

[Contact us](https://content.sirp.io/customer-portal/new?hsLang=en)

 What would you like to automate today?

- There are no suggestions because the search field is empty.

1. [SIRP Help Center](https://content.sirp.io/knowledge-base?hsLang=en)
2. [Integration Guide](https://content.sirp.io/knowledge-base/integration-guide?hsLang=en)

# Infoblox BloxOne Integration

**Infoblox BloxOne** Threat Defense is a comprehensive DNS Detection and Response (DNSDR) solution that detects and prevents a broad range of look-alike domain use, fast flux, and many others.

SIRP’s integration with **Infoblox BloxOne** improves security operations by fusing the capabilities of the two platforms, allowing analysts to respond to threats quickly and proactively**.**

### Supported Actions

SIRP’s **Infoblox BloxOne** integration app allows you to execute the following actions:

| **Action** | **Description** |
| --- | --- |
| Get IP Info | Get IP’s reputation and details |
| Get Hostname Info | Get Hostname’s reputation and details |
| Get URL Info | Get URL’s reputation and details |
| Block Domain | Block a domain on Infoblox BloxOne |
| Unblock Domain | Unblock a domain on Infoblox BloxOne |

### Requirements

This app configuration requires:

- **Policy Name:** \<Policy name for blocked domains list\>
- **Api Key**: \<Api Token\_key\>

### Enable the Infoblox BloxOne App in SIRP

- First, log in to SIRP, then go to **Apps** from the left navigation bar.
- Locate the app named **Infoblox** **BloxOne App.**
- **Enable** the **Infoblox BloxOne** app by clicking the toggle button under the Status.

[![](https://content.sirp.io/hubfs/Knowledge%20Base%20Import/image-4.png)](https://downloads.intercomcdn.com/i/o/984535812/ffda571616c83e443089c3db/image.png?expires=1752236100&signature=7482c0d0f920c634f102bc6bc29dc6acdeaeb174980b333c0b70432b834c7e27&req=fSgjE8p7lYBdFb4f3HP0gN515IQfDT8bHw8MoyN2FzxWDXusTlbtBvJBRk3M%0AIO4LbIrY%2FSRJVX6wAg%3D%3D%0A)

- Once enabled, click on the configuration button to add the following configuration:

    - **Configuration Name:** \<Give any name to this configuration\>
    - **Token**: \<API TOKEN KEY\>

[![](https://content.sirp.io/hubfs/Knowledge%20Base%20Import/image-Jul-11-2025-11-54-48-0126-AM.png)](https://downloads.intercomcdn.com/i/o/1176000301/e0f9812df91a9af07e63e47e/image.png?expires=1752236100&signature=de1704f7a4cd11f29a2b3e6831e7a375b528bbb93265fe341dc933402db4b185&req=dSEgEMl%2BnYJfWPMW1HO4zUHJCzzNWjqUKFmzPx8OZzYMo4DStFgEt4WuHW%2Bn%0AX26QOkFES09XqRAayXM%3D%0A)

### Integration in Action

Once the integration between **SIRP** and **Infoblox BloxOne** is complete, you can execute all the supported Actions. For example, from any container, click on the **Domain** then select

**Infoblox BloxOne** \> **Block Domain**

[![](https://content.sirp.io/hubfs/Knowledge%20Base%20Import/bafl%2Binflo%2Bintercom%2B2.png)](https://downloads.intercomcdn.com/i/o/1176015519/6a82374dac6150bcc50768fd/bafl+inflo+intercom+2.png?expires=1752236100&signature=a0db0e4f60b3404ca77432569487abeca8a2d2a67eeda9181381406c4f80a05c&req=dSEgEMl%2FmIReUPMW1HO4zSgDR18y9DD0x9iaR8Hx6MkG6HLnYtsk37ku0D6s%0AGAaFODa9MuBsr2bG4Qw%3D%0A)

 

Select the **App** **configuration,** add **the Custom-list** name of bloxone, and then click execute.

[![](https://content.sirp.io/hubfs/Knowledge%20Base%20Import/image-Jul-11-2025-11-54-58-4144-AM.png)](https://downloads.intercomcdn.com/i/o/1176017825/0a1ab7220b82a540a672a4f5/image.png?expires=1752236100&signature=697adbbcc077c841f7ed1ba75c8f4e962db33080671fe4fb97f7b37a6b661c19&req=dSEgEMl%2FmoldXPMW1HO4zXFNu2IdNMfJzhO%2F0JK2VMq5OAZIk%2FQvV7%2BCLjT0%0ARyBGyJoJPVK4GFgtklc%3D%0A)

 

Once the action is successfully executed, the domain will be blocked on **Infoblox BloxOne.**

Similarly, to execute enrichment actions from any container, click on the **Hostname** and then select **Infoblox BloxOne** \> **Get Hostname Info**

[![](https://content.sirp.io/hubfs/Knowledge%20Base%20Import/bafl%2Binflo%2Bintercom.png)](https://downloads.intercomcdn.com/i/o/1176006189/6ed8f19718df5807fa2234e3/bafl+inflo+intercom.png?expires=1752236100&signature=2d8b4bfd36f24d73a9b66890173349e586a191df9ade959e9056884624c447ef&req=dSEgEMl%2Bm4BXUPMW1HO4zaNw0wMj%2B66wUq3XjQvPKn8vUR3yT1MuVYziu8eA%0AmrGzfyECJ%2BWNkUKf%2B7w%3D%0A)

 

Select the **App** **configuration name** **of BloxOne,** then click execute.

[![](https://content.sirp.io/hubfs/Knowledge%20Base%20Import/Capture%2Bok.png)](https://downloads.intercomcdn.com/i/o/1176007271/c2d9f2cf4d9e6d81a7a040e3/Capture+ok.PNG?expires=1752236100&signature=9a11b71695669e5956df7d50f7994258c0b6d9971e10b4d6d336409aade650a3&req=dSEgEMl%2BmoNYWPMW1HO4zWrxiI9Gwy6ZJM8gQfMyelJFM7ASL0XsTqgGfTLM%0Aja1I%2BU8zK%2BXTP5OECFo%3D%0A)

Once the action is successfully executed, the **Hostname** information will be available to the user.

[![](https://content.sirp.io/hubfs/Knowledge%20Base%20Import/Capture%2Bnot%2Bok.png)](https://downloads.intercomcdn.com/i/o/1176035569/6e513795c732bd5b38bba4cf/Capture+not+ok.PNG?expires=1752236100&signature=263fdd9583add869684672bbbde7ee563cb8f7ee9fdee648d07ac6cfdc8a00b5&req=dSEgEMl9mIRZUPMW1HO4zcjZoIV%2FyfRDNFsfY5yH6VeMmclfSIllMkeTe3t5%0AYHhNhJw1bwvorwDo%2FTs%3D%0A)<https://content.sirp.io/knowledge-base/alienvault-integration-help-center-sirp?hsLang=en><https://content.sirp.io/knowledge-base/sophos-edl-integration-help-center-sirp?hsLang=en><https://content.sirp.io/knowledge-base/barracuda-email-security-gateway-integration-help-center-sirp?hsLang=en><https://content.sirp.io/knowledge-base/cisco-fmc-integration-help-center-sirp?hsLang=en><https://content.sirp.io/knowledge-base/cisco-wsa-integration-help-center-sirp?hsLang=en>

- [SIRP Community](https://content.sirp.io/knowledge-base/sirp-community?hsLang=en)
- [Playbook Guide](https://content.sirp.io/knowledge-base/playbook-guide?hsLang=en)
- [User Guide](https://content.sirp.io/knowledge-base/user-guide?hsLang=en#main-content)

    - [IM Guide](https://content.sirp.io/knowledge-base/user-guide?hsLang=en#im-guide)
- [Admin Guide](https://content.sirp.io/knowledge-base/admin-guide?hsLang=en)
- [Integration Guide](https://content.sirp.io/knowledge-base/integration-guide?hsLang=en)
- [Release Notes](https://content.sirp.io/knowledge-base/release-notes?hsLang=en)
- [Add on Apps](https://content.sirp.io/knowledge-base/add-on-apps?hsLang=en)
- [Architecture](https://content.sirp.io/knowledge-base/architecture?hsLang=en)
- [Use Cases](https://content.sirp.io/knowledge-base/use-cases?hsLang=en)

[![SIRP-Logo-4c-KO](https://content.sirp.io/hs-fs/hubfs/SIRP-Logo-4c-KO.png?width=200&height=90&name=SIRP-Logo-4c-KO.png "SIRP-Logo-4c-KO")](https://sirp.io)

### Global Headquarter

##### United States

7735 Old Georgetown Rd, Suite 510  
Bethesda, MD 20814

[+1 888 701 9252](tel:+18887019252)

<https://www.facebook.com/share/1CPERUMYH4/?mibextid=wwXIfr> <https://x.com/sirp_io> <https://www.instagram.com/> <https://podcasts.apple.com/> [mailto:email@email.com](mailto:email@email.com)

Copyright © 2025, SIRP Labs Inc